In addition to Weibo, there is also WeChat
Please pay attention
WeChat public account
Shulou
2025-04-03 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >
Share
Shulou(Shulou.com)05/31 Report--
This article mainly introduces the practical linux monitoring tools, which have certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, let the editor take you to understand it.
Ntop
Ntop is a tool for monitoring network traffic. Using ntop to display the use of the network is more intuitive and detailed than some other network management software. Ntop can even list the network bandwidth utilization of each node computer.
Iftop
Iftop is a real-time traffic monitoring tool similar to top under linux.
Htop
Htop is an interactive process browser under Linux that can be used to replace top commands under Linux.
Nmon
You can view network, CPU, memory, and disk usage.
Fping
They all use the same protocol, ICMP.
The detection mechanism is the same as the default echo is delay.
Fping can detect multiple ip,ping at the same time. It can only output ip segments manually.
The packet size of fping is 56 bytes, and the packet size of ping is 48 (all default bytes of ping are 56).
The default ping spacing for fping is 25 milliseconds, and the default ping is 1 second.
Hping3
Main function
1. Firewall test
2. Practical port scanning
3. Network detection, which can be sliced with different protocols, types of services (TOS) and IP
4. Manually detect the path of MTU (maximum transmission unit)
5. Advanced route tracking, supporting all protocols
6. Remote operating system detection
7. Remote run time detection
8. TCP/IP stack audit
Dstat
There are many parameters to choose from in the dstat command, which you can see through the man dstat command. Most commonly used parameters are these:
-l: display load statistics-m: display memory usage (including used,buffer,cache) Free value)-r: show TCP O statistics-s: show swap partition usage-t: display current time on the first line-fs: display file system statistics (including total number of files and inodes values)-nocolor: do not display colors (sometimes useful)-socket: display network statistics-tcp: show commonly used TCP statistics-udp: show some dynamic data about the monitored UDP interface and its current usage
Ss
The common parameters are:
Ss-A tcp: specifies the viewing protocol
Ss-ltp: displays the process name and PID
Httrack
Website crawler
Ncdu
Disk occupancy analyzer
Monitorix
Network monitoring tool
Netcat
Port scan
Tutorial: https://baike.baidu.com/item/Netcat
Slurm
The following options can be performed in the slurm interface:
◆ I: displaying lx/tx statu
◆ c: switch to the classic interface
◆ r: refresh the interface manually
◆ Q: exit tool
Saidar
Is another CLI system data monitoring and statistics tool that provides monitoring information about disk, network, storage, and SWAP.
Findmnt
Findmnt is a command-line tool built into Linux, which is mainly used to find the mounted file system status. Findmnt can view the mounted devices in the current system and perform mount or unmount operations if necessary.
Ccze
Ccze is very useful for highlighting logs in different colors to assist administrators in distinguishing and viewing analysis.
Ranwhen.py
The ranwhen.py we finally introduced is a python tool that graphically displays system activity.
To use this tool, you need to install python language support:
Sudo apt-add-repository ppa:fkrull/deadsnakessudo apt-get updatesudo apt-get install python3.2 then downloads ranwhen.pywget https://github.com/p-e-w/ranwhen/archive/master.zipunzip master.zip & & cd ranwhen-master to execute ranwhen.pypython3.2 ranwhen.py using the following command
Ethtool
View the properties of the network card
Atop
Atop is very similar to top,htop in that it can monitor all processes, but unlike top and htop, it can log processes on a daily basis for later analysis. It can also show the resource consumption of all processes. It also highlights resources that have reached the critical load.
Apachetop
Apachetop monitors the overall performance of the apache network server. It is mainly based on mytop. It displays the current read process, the number of write processes, and the total number of request processes.
Ftptop
Ftptop provides you with basic information about all current connections to the ftp server, such as the total number of sessions, the number of clients being uploaded and downloaded, and who the clients are.
Mytop
Mytop is a very concise tool for monitoring mysql threads and performance. It allows you to view the database in real time and which queries are being processed.
Powertop
Powertop can help you diagnose problems related to power consumption and power management. It can also help you with power management settings to achieve the most efficient configuration of your server. You can use the tab key to switch tabs.
Iotop
Iotop is used to check the usage of top O and provides a top-like interface for you to display. It shows the rate of reading and writing by column, with each row representing a process. It displays the percentage of time spent by the process when a swap or Ihammer O wait occurs.
Ntopng
Ntopng is an updated version of ntop, which provides a graphical user interface for web monitoring through a browser. It also has other uses, such as geolocation of hosts, display and analysis of network traffic and ip traffic distribution.
Jnettop
Jnettop monitors network traffic in the same way, but more vividly than iftop. It also supports custom text output and can analyze logs in depth in a friendly and interactive way.
BandwidthD
BandwidthD can track the usage of TCP/IP network subnets and build a HTML page visually through png images in the browser. It has a database system that supports search, filtering, multi-sensor and custom reports.
EtherApe
EtherApe graphically displays network traffic and can support more nodes. It can capture real-time traffic information and read it from tcpdump. You can also use a network filter in pcap format to display specific information.
NetHogs
NetHogs breaks the convention that network traffic is counted by protocol or subnet, and it is grouped by process. So, when network traffic surges, you can use NetHogs to see which process is causing it.
Iptraf
Various metrics collected by iptraf, such as TCP connection packets and bytes, port statistics and activity metrics, TCP/UDP communication failures, intra-site packets and bytes.
Ngrep
Ngrep is the grep of the network layer. It uses pcap, which allows packets to be matched by specifying extended regular or hexadecimal expressions.
MRTG
MRTG was originally developed to monitor router traffic, but now it can also monitor network-related things. It collects it every five minutes and then produces a HTML page. It also has the ability to send email alarms.
Bmon
Bmon can monitor and help you debug the network. It can capture network-related statistics and display them in a friendly way. You can also interact with bmon through scripts.
Traceroute
Traceroute is a built-in tool that displays routing and measures the delay of packets in the network.
IPTState
IPTState allows you to observe how traffic passes through iptables and sort it according to the criteria you specify. The tool also allows you to delete status information from iptables tables.
Darkstat
Darkstat captures network traffic and calculates usage statistics. The report is saved in a simple HTTP server, which provides you with a great graphical user interface.
VnStat
VnStat is a network traffic monitoring tool, its data statistics are provided by the kernel, and its consumption of system resources is very small. After the system restarts, the data it collects still exists. Artistic system administrators can use its color option.
Netstat
Netstat is a built-in tool that displays the number of TCP network connections, routing tables and network interfaces, and is used to find problems in the network.
Nmap
Nmap can scan the open ports of your server and detect which operating system you are using. But you can also use it for other purposes related to SQL injection vulnerabilities, network discovery, and testing.
MTR
MTR combines the functions of traceroute and ping into a network diagnostic tool. When using this tool, it limits the number of hops of a single packet and then monitors where they arrive when they expire. And repeat it every second.
Tcpdump
Tcpdump will output information that matches the captured packet according to the expression you specified on the command line. You can also save this data and analyze it further.
Justniffer
Justniffer is the tcp packet sniffer. With this sniffer you can choose whether to collect low-level data or high-level data. It also allows you to generate logs in a custom way. For example, imitate the access log of Apache.
Conky
Conky can monitor a lot of operating system data. It supports IMAP and POP3, and even many popular music players! For the convenience of different people, you can use your own Lua script or program to extend it.
Glances
Use Glances to monitor your system, which is designed to show you the most information in the smallest space. It can be run in client / server mode, and it also has the ability of remote monitoring. It also has a Web interface.
RRDtool
RRDtool is a tool for dealing with RRD databases. RRDtool is designed to deal with time series data, such as CPU load, temperature, etc. The tool provides a way to extract RRD data and display it in a graphical interface.
Monit
In the event of a failure, monit has the ability to send an alert and restart the service. It can check all kinds of data, and you can write a script for monit, which has a Web user interface to share the pressure on your eyes.
Linux process explorer
Linux process explorer is an activity monitor similar to OSX or Windows. It is more widely used than top or ps. You can check the memory consumption of each process and the usage of CPU.
Df
Df, which stands for disk free, is a program pre-installed on all UNIX systems to display the available disk space of the file system to which the user has access.
Discus
Discus is similar to df in that it aims to improve df by using more attractive features such as colors, graphics and numbers.
Xosview
Xosview is a classic system monitoring tool that gives you a simple overview of different parts, including IRQ.
Net-SNMP
SNMP is the simple Network Management Protocol, which is used by the Net-SNMP toolkit to help you collect accurate information about the server.
Incron
Incron allows you to monitor a directory tree and then take action against these changes. If you want a new file to appear in directory'a', copy it to directory 'baked', which is exactly what incron can do.
Vmstat
Vmstat (virtual memory statistics) is a small built-in tool that monitors and displays the memory of the machine.
Uptime
This Mini Program can quickly show how long your machine has been running, how many users are currently logged in and the average load of the system over the past 1 minute, 5 minutes and 15 minutes.
Mpstat
Mpstat is a built-in tool that monitors cpu usage. The most common way to use it is mpstat-P ALL, which provides you with information about cpu usage. You can also update cpu usage intermittently.
Pmap
Pmap is a built-in tool that reports the memory mapping of a process. You can use this command to find out the cause of the memory bottleneck.
Ps
This command will give you an overview of all current processes. You can use the ps-A command to view all processes.
Sar
Sar is part of the sysstat package that helps you collect, report, and save metrics for different systems. Using different parameters, it will provide you with CPU, memory and Imax O usage and other things.
Collectl
Similar to sar,collectl collecting your machine's performance metrics. By default, cpu, network, and disk statistics are displayed, but it actually collects a lot of information. Unlike sar, collectl can handle smaller units than seconds, it can be fed directly into the drawing tool, and the monitoring process of collectl is more extensive.
Iostat
Iostat is also part of the sysstat package. This command is used to monitor the input / output of the system. The report can be used for system tuning to better adjust the input / output load of the hard drive on your machine.
Free
This is a built-in command that displays the amount of memory available on your machine and the amount of memory used. It can also show the size of the buffer used by the kernel at some point.
GKrellM
GKrellm is a graphical application that monitors the status of your hardware, such as CPU, memory, hard disk, network interface, and more. It can also monitor and start the email reader of your choice.
Gnome
Gnome system monitor is a basic system monitoring tool, which can view the process dependency through a tree structure, kill the process and adjust the process priority, and display the indicators of all servers in the form of a chart.
GoAccess
GoAccess is a real-time network log analyzer that can analyze the access logs of apache, nginx and amazon cloudfront. It can also output data to HTML,JSON or CSV format. It will give you basic statistics, traffic, 404 pages, visitor location, and other things.
Logwatch
Logwatch is a log analysis system. It analyzes the log of the system and creates an analysis report for the part you specify. It gives you a report every day so that you can spend less time analyzing the log.
Ifconfig
Ifconfig is a built-in tool for configuring network interfaces. Behind most network monitoring tools, ifconfig is used to set the Nic to chaos mode to capture all packets. You can manually execute ifconfig eth0 promisc to enter chaos mode and use ifconfig eth0-promisc to return to normal mode.
Infrastructure Monitoring tool
Server Density
Our server monitoring tool has a web interface that allows you to set the alarm and view the network metrics of all systems through a chart. You can also set up monitoring sites, whether online or not. Server Density allows you to set user permissions, and you can extend your monitoring according to our plug-in or api. The service already supports plug-ins for Nagios.
OpenNMS
OpenNMS has four main functional areas: event management and notification; discovery and configuration; service monitoring and data collection. It is designed to be customized in a variety of network environments.
SysUsage
SysUsage continuously monitors your system through Sar and other system commands. Once the threshold is reached, it can also give an alarm notification. SysUsage itself can also collect all the statistics and store them in one place. It has a Web interface that allows you to view all the statistics.
Brainypdm
Brainypdm is a data management and monitoring tool that collects data from nagios or other regular sources and displays them graphically. It is cross-platform, Web-based and customizable.
PCP
PCP can collect metrics from multiple hosts and is very efficient. It also has a plug-in framework, so you can have it collect metrics that are important to you. You can access graphical data through any Web interface or GUI. It is more suitable for large-scale monitoring system.
KDE system daemon
This tool is both a system monitor and a task manager. You can view the service metrics of multiple machines through the worksheet, and if you need to kill a process or start a process, it can be done in the KDE system daemon.
Munin
Munin is both a network and a system monitoring tool. When an index exceeds a given threshold, it provides an alarm mechanism. It uses RRDtool to create charts, and it also has a Web interface to display these charts. It emphasizes plug-and-play functionality and there are many plug-ins available.
Nagios
Nagios is a system and network monitoring tool that helps you monitor multiple servers. It also has an alarm function when an error occurs. Its platform also has a lot of plug-ins.
Zenoss
Zenoss provides a Web interface that allows you to monitor all system and network metrics. In addition, it can automatically discover network resources and modify network configuration. And will remind you to take action, it also supports Nagios plug-ins.
Cacti
(same as the previous one!) Cacti is a network graphics solution that uses RRDtool for data storage. It allows users to vote at predetermined intervals and display the results graphically. Cacti can monitor the source of your choice through the shell script extension.
.Zabbix
Zabbix is an open source infrastructure monitoring solution. It uses many databases to store monitoring statistics. Its core is to write in C language and use PHP in the front end. If you don't like installing the agent, Zabbix is probably the best choice.
Collectd
Collectd is a Unix daemon that collects all monitoring data. It uses a modular design and uses plug-ins to fill some gaps. This keeps collectd lightweight and customizable.
Observium
Observium is a monitoring platform for automatically discovering networks, supporting a large number of hardware platforms and operating systems. Observium focuses on providing a beautiful, powerful, simple and intuitive interface to show the health and status of the network.
Nload
This is a command line tool to monitor the throughput of the network. It is neat because it uses two charts and other useful data such as the total amount of data transmitted to visualize inbound and outbound traffic. You can install it using the following methods:
Yum install nload
Or
Sudo apt-get install nload
SmokePing
SmokePing can track your network delays and visualize them. There are various delay measurement plug-ins developed for SmokePing. If the graphical user interface is very important to you, there is now a plug-in under development to implement this feature.
Shinken monitoring
Shinken is a monitoring framework that uses python to completely rewrite Nagios. Its aim is to increase flexibility and manage a larger environment. But still keep all the nagios configurations and plug-ins.
Thank you for reading this article carefully. I hope the article "what are the practical linux monitoring tools" shared by the editor will be helpful to you? at the same time, I also hope you will support us and pay attention to the industry information channel. More related knowledge is waiting for you to learn!
Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.
Views: 0
*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.
Continue with the installation of the previous hadoop.First, install zookooper1. Decompress zookoope
"Every 5-10 years, there's a rare product, a really special, very unusual product that's the most un
© 2024 shulou.com SLNews company. All rights reserved.